rhel10/firefox-flatpak

Direct Vulnerabilities

Known vulnerabilities in the rhel10/firefox-flatpak package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
CVE-2026-7323

*
  • M
Authentication Bypass

*
  • M
Arbitrary Command Injection

*
  • M
Out-of-Bounds

*
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • H
Incorrect Privilege Assignment

*
  • M
Origin Validation Error

*
  • H
Arbitrary Code Injection

*
  • H
Arbitrary Code Injection

*
  • H
Improper Check for Unusual or Exceptional Conditions

*
  • M
OS Command Injection

*
  • H
Use After Free

*
  • L
Authentication Bypass

*
  • M
Expired Pointer Dereference

*
  • M
Origin Validation Error

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Trust Boundary Violation

*
  • M
Expired Pointer Dereference

*
  • H
Out-of-bounds Write

*
  • H
Race Condition

*
  • H
Out-of-bounds Write

*
  • H
Use After Free

*
  • M
Interpretation Conflict

*
  • H
Out-of-Bounds

*
  • H
Improper Access Control

*
  • H
Out-of-Bounds

*
  • H
Exposure of System Data to an Unauthorized Control Sphere

*
  • M
Out-of-bounds Read

*
  • M
Integer Overflow or Wraparound

*
  • M
Overly Permissive Cross-domain Whitelist

*
  • H
Access of Uninitialized Pointer

*
  • H
Out-of-Bounds

*
  • L
Information Exposure

*
  • H
Use After Free

*
  • H
Out-of-Bounds

*
  • M
Improper Initialization

*
  • H
Out-of-Bounds

*
  • H
Information Exposure

*
  • M
Arbitrary Code Injection

*
  • M
Incorrect Default Permissions

*
  • M
Cross-site Scripting (XSS)

*
  • H
Out-of-Bounds

*
  • M
Protection Mechanism Failure

*
  • H
Use of Uninitialized Variable

*
  • L
NULL Pointer Dereference

*
  • H
Insufficient Protection Against Instruction Skipping Via Fault Injection

*
  • H
Out-of-Bounds

*
  • M
Information Exposure

*
  • M
Cross-site Scripting (XSS)

*
  • M
Use of Incorrectly-Resolved Name or Reference

*
  • H
Use After Free

*
  • H
Double Free

*
  • M
Inclusion of Functionality from Untrusted Control Sphere

*
  • M
Out-of-Bounds

*
  • M
Out-of-Bounds

*
  • M
Improper Encoding or Escaping of Output

*
  • M
Inclusion of Functionality from Untrusted Control Sphere

*
  • L
Improper Restriction of Rendered UI Layers or Frames

*
  • H
Out-of-bounds Write

*
  • H
Out-of-bounds Write

*